$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/682e9a68-26a9-36ec-8edc-50811bfe62f7.roa File: 682e9a68-26a9-36ec-8edc-50811bfe62f7.roa (raw, json) Hash identifier: GwhEPxMkcW9Z5w+2+qr4LIZfMX11JRCi6MAkudRFFSE= Subject key identifier: 2A:38:CE:EF:02:8F:46:42:94:39:C1:CC:6F:8D:EE:C3:43:2A:D2:89 Certificate issuer: /CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Certificate serial: 010D0C9F4328584B28C6F0E225E3BD86E1C48D48 Authority key identifier: 83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/682e9a68-26a9-36ec-8edc-50811bfe62f7.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 401770 IP address blocks: 2604:13e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:f0:e2:25:e3:bd:86:e1:c4:8d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded84a4b-9790-4a18-bca9-43e49e2f0b71 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=5f817735-f360-40f7-bd55-9f3771ebf70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:fc:c0:b8:53:09:30:e4:8d:02:27:df:c6: 76:36:1c:4f:a0:55:4f:d5:43:bf:d8:80:55:f8:f3: 37:2d:b4:1c:bb:22:b8:b9:bc:b7:73:0c:5c:7a:37: fc:14:fc:5c:74:49:8d:88:40:c2:cd:38:9a:d8:5f: 21:d6:34:b8:12:8e:ba:fa:f9:39:f5:ca:6d:fd:cc: bd:64:95:f6:a2:4c:50:fa:7d:de:23:38:f4:1d:b3: cb:96:b2:c7:74:65:8a:35:91:91:ad:4f:f7:b2:e7: 52:78:3e:07:ae:aa:8a:59:8c:dd:5b:31:63:15:a0: 7b:e9:5a:62:fb:8e:56:9f:c5:3c:5b:06:50:ef:1f: 60:10:51:ea:4a:fd:0b:95:93:5d:34:25:e1:50:7a: 0e:51:f3:0a:6a:ef:db:7f:3e:1a:8d:a6:b4:40:b7: ad:9f:45:f8:a0:97:3c:02:45:7f:90:db:ea:02:0e: d5:cb:fc:90:20:16:51:30:18:ee:f0:50:96:d7:eb: d1:d1:5c:23:65:5e:d8:5d:c4:cb:d9:ad:ac:cb:0c: 9f:e4:b6:07:76:f4:ed:d9:24:dc:93:80:5a:f0:7e: 64:62:80:ed:31:37:f8:63:e5:5a:56:c4:b9:06:73: fa:df:bd:e1:d0:53:ed:9f:da:21:bc:92:b2:b8:49: bf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:38:CE:EF:02:8F:46:42:94:39:C1:CC:6F:8D:EE:C3:43:2A:D2:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/682e9a68-26a9-36ec-8edc-50811bfe62f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71/ded84a4b-9790-4a18-bca9-43e49e2f0b71.crl X509v3 Authority Key Identifier: keyid:83:45:07:D1:4B:C2:27:F0:66:F0:B8:58:F3:CE:65:72:A8:1A:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ded84a4b-9790-4a18-bca9-43e49e2f0b71.cer sbgp-ipAddrBlock: critical IPv6: 2604:13e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:92:a5:08:14:62:4f:74:9e:05:60:39:9c:d9:4c:7a:75:11: 41:21:6a:17:32:e6:84:4d:f9:a1:fe:86:c1:9a:d4:ac:96:62: 37:f1:a3:fb:fb:3c:35:47:0f:f2:06:0a:ac:52:33:85:c7:36: 5b:a8:97:52:75:7d:09:7a:29:7c:4e:19:7c:ee:73:19:cd:61: f6:29:32:93:e9:7a:b0:f4:d7:3d:3d:33:1b:9d:50:88:d8:5f: f5:39:d3:8c:c6:6b:e1:f5:57:4e:3d:24:9b:70:a3:65:94:8a: a7:a4:99:67:98:e0:c6:b1:35:03:c8:0e:8d:2c:65:75:d0:aa: 70:f7:7e:32:92:c4:0c:62:40:4b:71:68:0c:2b:51:14:dc:15: a7:50:75:82:d8:fa:31:cb:a4:82:cf:e1:fb:1b:e9:0c:13:2e: 90:bc:43:bc:c4:09:2e:cb:bd:96:ac:54:d2:09:a0:0c:77:a3: ea:e8:9a:1f:ce:89:73:d3:ee:77:48:26:c9:c1:9d:2f:8b:58: 88:2d:a5:e8:9e:57:9e:06:65:bf:ed:f4:d5:0f:fc:ce:6f:8a: 14:50:de:e4:99:5c:79:5b:76:33:41:be:ca:13:2d:0b:ed:8b: dc:bc:e4:0d:58:6f:e8:a6:d2:52:65:06:e1:81:5a:91:dd:a4: 0c:eb:44:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsoxvDiJeO9huHEjUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGVkODRhNGItOTc5MC00YTE4LWJjYTktNDNlNDllMmYw YjcxMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk NWY4MTc3MzUtZjM2MC00MGY3LWJkNTUtOWYzNzcxZWJmNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyD8wLhTCTDkjQIn38Z2NhxPoFVP1UO/2IBV +PM3LbQcuyK4uby3cwxcejf8FPxcdEmNiEDCzTia2F8h1jS4Eo66+vk59cpt/cy9 ZJX2okxQ+n3eIzj0HbPLlrLHdGWKNZGRrU/3sudSeD4HrqqKWYzdWzFjFaB76Vpi +45Wn8U8WwZQ7x9gEFHqSv0LlZNdNCXhUHoOUfMKau/bfz4ajaa0QLetn0X4oJc8 AkV/kNvqAg7Vy/yQIBZRMBju8FCW1+vR0VwjZV7YXcTL2a2sywyf5LYHdvTt2STc k4Ba8H5kYoDtMTf4Y+VaVsS5BnP6373h0FPtn9ohvJKyuEm/PwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCo4zu8Cj0ZClDnBzG+N7sNDKtKJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4 NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0OWUyZjBiNzEvNjgyZTlhNjgtMjZhOS0z NmVjLThlZGMtNTA4MTFiZmU2MmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGVkODRhNGItOTc5MC00YTE4LWJj YTktNDNlNDllMmYwYjcxL2RlZDg0YTRiLTk3OTAtNGExOC1iY2E5LTQzZTQ5ZTJm MGI3MS5jcmwwHwYDVR0jBBgwFoAUg0UH0UvCJ/Bm8LhY885lcqgaAcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kZWQ4NGE0Yi05NzkwLTRhMTgtYmNhOS00M2U0 OWUyZjBiNzEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQT4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6kqUIFGJPdJ4FYDmc2Ux6dRFBIWoXMuaETfmh/obBmtSslmI38aP7 +zw1Rw/yBgqsUjOFxzZbqJdSdX0Jeil8Thl87nMZzWH2KTKT6Xqw9Nc9PTMbnVCI 2F/1OdOMxmvh9VdOPSSbcKNllIqnpJlnmODGsTUDyA6NLGV10Kpw934yksQMYkBL cWgMK1EU3BWnUHWC2Poxy6SCz+H7G+kMEy6QvEO8xAkuy72WrFTSCaAMd6Pq6Jof zolz0+53SCbJwZ0vi1iILaXonleeBmW/7fTVD/zOb4oUUN7kmVx5W3YzQb7KEy0L 7YvcvOQNWG/optJSZQbhgVqR3aQM60Tj -----END CERTIFICATE-----Generated at Mon Oct 20 07:58:05 2025 by rpki-client